Static task
static1
Behavioral task
behavioral1
Sample
8baa1ada1be347801b1773ea388c3226_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8baa1ada1be347801b1773ea388c3226_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8baa1ada1be347801b1773ea388c3226_JaffaCakes118
-
Size
332KB
-
MD5
8baa1ada1be347801b1773ea388c3226
-
SHA1
35eee977b76909b6f157a8faa002b7ea9dd285ae
-
SHA256
2b14f0987c085dc16862498333db09a4812a2be81983049869c4973a7332d27d
-
SHA512
9aa42c73da02ebdb6e4f186c568bd45b0c93dd8e0eeabfc6ae4ce92dfc1dabde06123f15774b5a9f1058e9e76de59cc452083f83ae2d1075b4591f64146a6c01
-
SSDEEP
6144:sl5DMtfewvG7GwnwmARzvwct2FMEO6YR2cqsMfmgszg61SCRkQOR:4hff4wS2FM9q4gegiSCRkQq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8baa1ada1be347801b1773ea388c3226_JaffaCakes118
Files
-
8baa1ada1be347801b1773ea388c3226_JaffaCakes118.exe windows:4 windows x86 arch:x86
081f434041b9786b9f242d741d028424
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgOpenPropStg
CoGetObject
OleSetMenuDescriptor
BindMoniker
PropVariantClear
OleRegGetMiscStatus
OleCreateDefaultHandler
OleNoteObjectVisible
CoFileTimeToDosDateTime
OleLoadFromStream
CoRegisterPSClsid
GetRunningObjectTable
IIDFromString
CoTaskMemAlloc
gdi32
CopyEnhMetaFileA
CreateCompatibleDC
AbortDoc
EnumObjects
CombineRgn
GetBrushOrgEx
GetBitmapDimensionEx
EqualRgn
CopyEnhMetaFileW
CreateDiscardableBitmap
CloseMetaFile
comctl32
ord6
CreateStatusWindowW
ord16
PropertySheetA
CreatePropertySheetPageW
ord8
ord3
ord14
shlwapi
StrStrA
StrRStrIW
StrRChrIW
StrCSpnW
StrChrIW
StrToIntA
kernel32
FreeEnvironmentStringsA
LocalHandle
HeapLock
GetProcAddress
GetModuleFileNameA
GetEnvironmentStrings
QueryPerformanceCounter
TlsGetValue
GetTickCount
TlsSetValue
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetNumberFormatA
LeaveCriticalSection
VirtualAllocEx
LCMapStringA
IsBadWritePtr
HeapAlloc
EnterCriticalSection
SetLocaleInfoA
GetACP
msvcrt
__setusermatherr
_exit
_controlfp
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ